Configuring Bypass Option for Logon Password

[Former Member]

Hi friends,

I'm using a PocketPC with Windows Mobile 2003 Second Edition and follow the steps described in this <a href="http://help.sap.com/saphelp_nw04/helpdata/en/43/0358852b785171e10000000a1553f7/frameset.htm">Help</a> to bypass local logon screen.

This document says that with this configuration the "logon of the user onto the OS is sufficient by SAP MI", but I read the Windows 2003 Mobile SE help and did not found any way to configure a user.

Can anyone help me?

Thanks in advance

Michel

[Former Member · Accepted solution]

Hi Michael,

what the documentation wants to describe is that MI does not care about the local device and client logon. It assumes that user authentification is performed on OS level. You still have to create one local MI user, which is used during sync with the middleware. Afterwards when starting the client you are automatically sent to the MI Homepage without any password request.

Actually this is, especially on PDAs, a security risk! Everyone getting the device can work with the client without the need of entering the password. For the sync a password is required...

Cheers Thomas

[Former Member · Accepted solution]

Hi Thomas. Thank you for your answer!

I did the configuration and created a single local user, but the MI client still asking for a logon and password. Bellow is a copy of my MobileEngine.config file.

#Tue Dec 19 14:36:22 GMT-02:00 2006

MobileEngine.UM.SingleUserMode=true

MobileEngine.Sync.Gateway=<Gateway>

Runtime=awt

MI.ClientInstaller.StaticCommandLine=-Of -mi -classpath '%CI_HOME%/MICI.jar' com.sap.ip.mi.ci.ClientInstaller '-home:%CI_HOME%'

MobileEngine.Sync.Language=PT

MobileEngine.Sync.Gateway.Protocol=http

MobileEngine.Sync.Timezone=BET

Init.UsingTomcatDirs=false

MobileEngine.Security.BypassLocalLogonPassword=true

MobileEngine.Sync.Gateway.System=<System>

MI.Executable=%JAVA_EXE%

MI.StaticCommandLine=-mi -Of -cf MI/creme_listOfJars.txt com.sap.ip.me.core.Startup '-home:%MI_HOME%'

Init.OperatingSystem=WINCE

MobileEngine.Sync.Client=200

MobileEngine.Sync.Gateway.Port=<port number>

MobileEngine.Sync.Gateway.Host=<host>

MobileEngine.Security.SynchronizationPasswordHandlingOption=atSync

MobileEngine.Reg.AlreadyInitialized=true

I understand the security risk, but is a customer decision

Regards

Michel

[Former Member · Accepted solution]

Hi Michael,

which MI Version are you using? In MI 2.5 the bypass option came with SP14! If your version is 2.5 SP13 or below the bypass option is not available.

-->

http://help.sap.com/saphelp_nw04/helpdata/en/43/0e926a63cb21b3e10000000a1553f6/frameset.htm

Rgds Thomas